#33212: Incorrect cookie parsing by django.http.cookie.parse_cookie
-----------------------------------+--------------------------------------
     Reporter:  Christos Georgiou  |                    Owner:  nobody
         Type:  Bug                |                   Status:  new
    Component:  Core (Other)       |                  Version:  3.2
     Severity:  Normal             |               Resolution:
     Keywords:  cookies            |             Triage Stage:  Unreviewed
    Has patch:  0                  |      Needs documentation:  0
  Needs tests:  0                  |  Patch needs improvement:  0
Easy pickings:  0                  |                    UI/UX:  0
-----------------------------------+--------------------------------------

Comment (by Mr. Glass):

 I don't think there will be a perfect answer to this until there is a new
 RFC that applications actually respect, and what we have now may be the
 best option.

 Is it a bad idea to refuse the invalid cookies outright?

 P.S. Thanks for that great write-up Colin, I'm learning new things today
 :)

-- 
Ticket URL: <https://code.djangoproject.com/ticket/33212#comment:7>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/062.440b937312edf581efe90a3618cc5583%40djangoproject.com.

Reply via email to